A computer-implemented method of assisting in establishing a secure communication is disclosed. The method includes obtaining an encryption key that is shared with a credentialing device, receiving from a client device an encrypted session identifier that encodes a password, decrypting the session identifier with the key to extract the password, and authenticating a communication session for the device using a challenge-response protocol.